CVE-2014-9449

Fixed in a distro release EPSS 4%

Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file.

Published 2015-01-02 · CVE record · OSV

Products: exiv2, fedoraproject fedora

Distro releases